tixastronauta/acc-ip

Release historycaution

The package has existed since 2015, but only four releases are recorded and none occurred in the last 12 months; the latest release was about 19 months ago. This suggests limited ongoing maintenance, despite its long history.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest release. This is meaningful abandonment risk for a library dependency.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest maintenance and assurance gap rather than a severe dependency risk.

Security policycaution

The repository has no security policy, which reduces disclosure transparency for a package that processes client IP information. The small scope and otherwise clear project structure partly limit the concern.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no reported dangerous findings, but both of its two action references are unpinned. That leaves avoidable build-integrity exposure.